OCBC Bank Logo

OCBC Bank

Cyber Security Specialist (Application/Infrastructure/Cloud)

Posted 26 Days Ago
Be an Early Applicant
In-Office
Singapore, SGP
Senior level
In-Office
Singapore, SGP
Senior level
Provide security architecture guidance across application, cloud, and infrastructure initiatives. Identify risks early, define mitigation strategies, maintain security standards and blueprints, conduct threat modelling and risk assessments, embed Zero Trust and secure-by-design principles, integrate controls into SDLC/CI-CD, review network controls, and support vulnerability management including container/image scanning.
The summary above was generated by AI
WHO WE ARE:

As Singapore’s longest established bank, we have been dedicated to enabling individuals and businesses to achieve their aspirations since 1932. How? By taking the time to truly understand people. From there, we provide support, services, solutions, and career paths that meet their individual needs and desires.

 Today, we’re on a journey of transformation. Leveraging technology and creativity to become a future-ready learning organisation. But for all that change, our strategic ambition is consistently clear and bold, which is to be Asia’s leading financial services partner for a sustainable future.

 We invite you to build the bank of the future. Innovate the way we deliver financial services. Work in friendly, supportive teams. Build lasting value in your community. Help people grow their assets, business, and investments. Take your learning as far as you can. Or simply enjoy a vibrant, future-ready career.

Your Opportunity Starts Here.

Why Join
Protecting our customers' assets and data is at the heart of everything we do at OCBC. As a Cyber Security Specialist, you'll play a critical role in safeguarding our systems and networks from cyber threats. You'll be part of a team that's shaping the future of cybersecurity in the financial industry.
How you succeed
To succeed in this role, you'll need to stay one step ahead of emerging threats. You'll work closely with our engineering teams to identify and mitigate risks, and develop strategies to protect our systems and data. You'll need to be proactive, collaborative, and always looking for ways to improve our cybersecurity posture.
What you do

  • Provide security architecture guidance to application, cloud (AWS, Azure, GCP, hybrid), and infrastructure initiatives from design through implementation and delivery.

  • Identify security risks early in the project lifecycle and define pragmatic, risk‑based mitigation strategies.

  • Translate business, regulatory, and technical requirements into secure, resilient, and scalable architectures.

  • Define, maintain, and govern security architecture standards, blueprints, and reference architectures across application, cloud, and infrastructure domains.

  • Embed security‑by‑design, Zero Trust, defense‑in‑depth, and least‑privilege principles across all solutions.

  • Conduct threat modelling, architectural risk assessments, and secure design reviews.

  • Integrate security controls into SDLC and CI/CD pipelines, supporting DevSecOps maturity.

  • Architect and review network and infrastructure security controls, including segmentation, firewalls, IDS/IPS, and related technologies.

  • Support vulnerability and exposure management, including container and image scanning tools (e.g., Red Hat ACS, Aqua, Trivy).

Who you are

More than 5 years of experience in security architecture, spanning application, cloud, and/or infrastructure security (cloud‑focused profiles may be considered with 5+ years of strong hands‑on experience).

Strong knowledge of:

  • Secure SDLC and DevSecOps practices

  • Application security concepts (OWASP Top 10, CWE; application threat modelling)

  • Cloud and infrastructure security architectures

  • API and microservices security patterns

  • Identity and access management and modern authentication protocols

  • Experience securing cloud‑native and containerised environments.

  •  Strong communication, stakeholder engagement, and advisory skills, with the ability to influence across technology and business teams.

  • One or more of: CISSP, CCSP, CSSLP, GWAPT (or equivalent)

  • Cloud security certifications such as:

    • AWS Certified Security – Specialty

    • Azure Security Engineer Associate

    • GCP Professional Cloud Security Engineer

Who we are
As Singapore's longest established bank, we have been dedicated to enabling individuals and businesses to achieve their aspirations since 1932. How? By taking the time to truly understand people. From there, we provide support, services, solutions, and career paths that meet their individual needs and desires.
Today, we're on a journey of transformation. Leveraging technology and creativity to become a future-ready learning organisation.
But for all that change, our strategic ambition is consistently clear and bold, which is to be Asia's leading financial services partner for a sustainable future.
We invite you to build the bank of the future. Innovate the way we deliver financial services. Work in friendly, supportive teams. Build lasting value in your community. Help people grow their assets, business, and investments. Take your learning as far as you can. Or simply enjoy a vibrant, future-ready career. Your Opportunity Starts Here.
 

What we offer:


Competitive base salary. A suite of holistic, flexible benefits to suit every lifestyle. Community initiatives. Industry-leading learning and professional development opportunities. Your wellbeing, growth and aspirations are every bit as cared for as the needs of our customers.

HQ

OCBC Bank Singapore, Singapore, SGP Office

Singapore, Singapore

OCBC Bank Singapore Office

Singapore

OCBC Bank Singapore Office

Singapore

Similar Jobs

10 Hours Ago
In-Office
Singapore, SGP
Expert/Leader
Expert/Leader
Artificial Intelligence • Hardware • Information Technology • Machine Learning
The HBM PE Principal Component Validation Engineer coordinates with teams on validation needs, troubleshoots failures, provides technical training, and works on enhancing product reliability and quality.
Top Skills: CC++GitLinuxPythonSvnUvmVerilog
10 Hours Ago
In-Office
Singapore, SGP
Entry level
Entry level
Artificial Intelligence • Hardware • Information Technology • Machine Learning
Performs electrical and physical failure analysis for semiconductor device anomalies, customer returns, and qualification failures. Uses advanced microscopy, imaging, probing, and testing tools, along with Bash and Python in Unix environments, to identify failure mechanisms. Collaborates with process and product teams, develops improved analysis techniques, maintains lab safety and quality standards, prepares reports, presents findings, guides technicians, and supports automation, analytics, and AI-enabled workflow improvements.
Top Skills: 2D X-Ray3D X-RayAi-Enabled ToolsAutomationBashBench TesterCsamData AnalyticsEmmiFib/EdxIon MillingMicro-ProberPythonSemUnix
10 Hours Ago
In-Office
Singapore, SGP
Senior level
Senior level
Artificial Intelligence • Hardware • Information Technology • Machine Learning
Own smart manufacturing product solutions from problem definition through deployment, adoption, and value realization. Gather business requirements, define solution scope and KPIs, prioritize improvement opportunities, and lead cross-functional projects with data scientists, data engineers, suppliers, and manufacturing stakeholders. Use operational data, AI, machine learning, and automation to improve wafer output, productivity, decision-making, and capital efficiency.
Top Skills: Artificial IntelligenceAutomationData EngineeringData ScienceGenerative AiIndustrial Internet Of Things (Iiot)Machine Learning

What you need to know about the Singapore Tech Scene

The digital revolution has driven a constant demand for tech professionals across industries like software development, data analytics and cybersecurity. In Singapore, one of the largest cities in Southeast Asia, the demand for tech talent is so high that the government continues to invest millions into programs designed to develop a talent pipeline directly from universities while also scaling efforts in pre-employment training and mid-career upskilling to expand and elevate its workforce.

Sign up now Access later

Create Free Account

Please log in or sign up to report this job.

Create Free Account